Static task
static1
Behavioral task
behavioral1
Sample
0555273fafa1a1fd8c1871b44054202ec92024e2bdc3db9d9306761059d08bc2.exe
Resource
win7-20240221-en
General
-
Target
0555273fafa1a1fd8c1871b44054202ec92024e2bdc3db9d9306761059d08bc2
-
Size
55KB
-
MD5
ee9c18e47f006760d504119a99284da9
-
SHA1
1b0274059bbf3d3bbd6b3104d4221eb70f86de16
-
SHA256
0555273fafa1a1fd8c1871b44054202ec92024e2bdc3db9d9306761059d08bc2
-
SHA512
0862c7d4f02c38942f9fd0292b3883bb13e4b1fd0f5fb8f68a69e20ed31d01e8fc73a7490e63136d96f4f25c536e8ac6e2ccedca1a36d986ab59f36367c2ada4
-
SSDEEP
1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnUiD:It7R8fU6n8U6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0555273fafa1a1fd8c1871b44054202ec92024e2bdc3db9d9306761059d08bc2
Files
-
0555273fafa1a1fd8c1871b44054202ec92024e2bdc3db9d9306761059d08bc2.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
UIJDHTEY Size: - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UIJDHTEY Size: 47KB - Virtual size: 48KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE